[tor-bugs] #10700 [Website]: tell users about tor-arm on the tor-relay-debian page
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Jan 22 22:24:41 UTC 2014
#10700: tell users about tor-arm on the tor-relay-debian page
-------------------------+-----------------
Reporter: arma | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Website | Version:
Resolution: | Keywords:
Actual Points: | Parent ID:
Points: |
-------------------------+-----------------
Comment (by arma):
apparently the arm package tells people to "sudo -u debian-tor arm", and
that is very unwise because it gives arm access to (e.g.) tor's keys.
That's probably a good bug to file for arm.
Better is to have users "sudo adduser $USER debian-tor" as the user that
will be running arm, and then logout/login again and run arm. It will
automatically look for both the control port (not configured by default)
and the control socket (configured by default in the deb), and "should
just work".
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10700#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list